Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-23341

Incorrect role/policy subtree limitation handling in section/assign

    Details

      Description

      When a user/group has multiple roles assigned, and one of the roles has a subtree limitation, section/assign will not consider other (more permissive) roles/policies.

      Steps to reproduce:
      1. Create role 1: section, assign, NewSection( Standard , Media , Restricted )
      2. Create role 2: section, assign, NewSection( Standard , Media , Restricted )
      3. Create Folder 'TestFolder' under root, and article 'TestArticle' beneath.
      4. Create user 'TestUser' under group Editors
        1. Assign role1 to 'TestUser' with subtree limitation /TestFolder
        2. Assign role2 to 'TestUser' without limitations.
      5. Login with 'TestUser'
        1. Edit 'TestArticle', verify that modifying section works as intended.
        2. Edit other content outside of the '/TestFolder' path, verify that setting section does not work.

      The following will be displayed in error.log:

      [ Sep 12 2014 18:23:49 ] [127.0.0.1] :
      You do not have permissions to assign the section <Media> to the object <OtherArticle>.
      

        Issue Links

          Activity

          Show
          Yannick Roger (Inactive) added a comment - Fixed in master: revert of EZP-17219 : https://github.com/ezsystems/ezpublish-legacy/commit/27796f075f063efa1aee57e4bcfc46f097d5e448 fix: https://github.com/ezsystems/ezpublish-legacy/commit/82593f37381b3c27dbea8a0334bdcfa71751d2ae
          Hide
          Rui Silva (Inactive) added a comment - - edited

          Approved by QA.
          Tested on 4.7, 5.0, 5.1, 5.2, 5.3 and master.

          Show
          Rui Silva (Inactive) added a comment - - edited Approved by QA. Tested on 4.7, 5.0, 5.1, 5.2, 5.3 and master.

            People

            • Assignee:
              Unassigned
              Reporter:
              Joao Inacio (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 day
                1d